PROGRAM 


PROTECTION NEWSLETTER 
JUKE 1985 


•»t IS A 


PROGRAM ?ROTECTIOi EEWSLFTTERI 


,t is . monthly newsletter that 

of all types. Each no.th -111 cover 3 Jo 5 JpecifUothers E ay be 
program protection schemes. Somexlll he very <erocessors,'. <l*t« bases, 
verv difficult. Some issues- will * cover - wo p selected end 

Spread sheets and g.mes. hany dlfferen progr.m « Uc 

each will be fully explained as to their type v 


Each program example used wnl be for nlustr.Uve P£P”“ 0, %, 9 ‘V cr 
not the intention of this newsl etter program. . UNAUTHORIZED 

K5i!sVi'!:i8 , .Snr»ia» , ir;:isSi' 


KHY WOULD ANYBODY REED A PR06RAK PROTECTION NEWSLETTER? 


Many programs have a very ^oSo^eOBO^etc 0 ). SC 0ther programs, use 

'used on some disk drives (MSD, 4040. 8050 dri / e . Many other 

errors on the disk that can be .Y®r^ f -n their programs of one specific 
people just prefer to use one disk for all ; tneir PS. .. . .. 

type (i.e. utilities). r r ' ‘ 


. - - - ■ 

According to federal copyright 1 t^^ased^fou* Ire ^aTsp 
cepy of eny program that you B *.modifications are essential to the 
codify your program as long as^the " odlfl ^ at ^ 5 not allow the program to 
program's operation. Some P rotec J;iuse of sophisticated copy 
be directly backed up. They may require the -to ‘understand. In 

programs or extensive knowledge °f MACHINE 5n arch ival copy 

either -ase the average user may not be abl e to ootain ^ ^ know - Bore 
of thei valued programs. Another group of P P 3 t t0 kriow how 

about their computer and its . They want to know 

programs are protected and £° w 1 J^prote^t their own programs, 

how to modify their own disks and now to prucc 


whatever reason you have for wanting to learn about program protection, 
this newsletter is for you 


PASS THIS COUPON ON TO TOUR FRIENDS y0UR K SUBSCRIPT10K FO^THE 

PROTECTION SCHEMES. BETTER TET, USE IT TO REIUW 
NEXT YEAR, AUG. 85 TO JULY 86. 


SUBSCRIPTION PRICE $35.00 JJ^T PAID IN U.S. 
($45.00 FOR 1ST CLASS F0REI6N MAIL DELIVER ) 


AND CANADA 



Renew by Awgust for 
continuous delivery. 

— • • ^ - ■ » » •• »> ^ n r 


CSM SOFTWARE INC. 

p. 0. BOX 563 
fPOWN POINT. IN 46307 










* * * * * IMPORTANT K0T1CE 


* * it.-*. * * 


• VOKE USING an : AFTER MARKET ' POWEIT SWPtT 1-MlEC aI^A 

....JDORE COMPUTE^ : J«iS fuBTS 8WPLT (.v.lljbl. fr«^ H#h^ Y0(J „ m , 

POTENTIALLY OANGtROUS DEFECT IN ITS BESI6N. I ™ U J“~ T0 10M sijPPLtt* FOR 

THIS POWER SUPPLY IMMEDIATE LY PISCONNECTIT AND R T0 k us£R GROUP. 

IMMEDIATE. INSPECUON AND/UK , k ^fiit *tS Yf^R^KEMBERS ‘IT 'JUST KAY SAVE 
PLEASE PASS THIS INFORMATION ALONG TO YOUR MEMBERS-- .. 

SOMEONE'S LIFE! ! ! 


NEWS IS BAD NEWS DEPT. - I SEP IC 


NO 

Last oonth we told you that an 1nter - es ^ S t contti P jwe d had been promised an 
announced - ISEPIC. As we went “irlfJht dJlile™ ^ u . 1s# 

I SEP IC for evaluation, to arrive by overmg .. y JSEPIC lt'-S '-being 

five weeks and numerous phone calls later and still no ISEPiC..ix .* . 

shipped this week'. We'll see. • - ... ■ - . 

For all of you who called during the ®° *° ISEPIC °we MVreviev. IV'in the 

for the inconvenience. If and when we get a », hol< trff /ifitrrChasiog 

newsletter. Until then, we 5 tr0n9l -- c 1«? 9 fiflr^&tien Ve^ve -obljiYieti^-hrougb 
one. although the.14;.;nViW^|«i. to 
- the grapevine indicates that ISEPIC^j^ct ■* much beyond., wbat can 

be! According to this intonation, it doesn t handle mucn y ■ that 

•toe dome with copy utilities. Ifs . so rumored to^eesy^defe^. ^ to 

even if it works on today s programs, ' y ^ -there's .not much we 

confirm or disprove these rumors as soon as we can, dux 

can do Without the product! Stay tuned. . ’ 


F-15 STRIKE EAGLE - UPDATE . * - 

Thanks to Joe Aufiero of Scotia, N.Y. for the following information. 

There are apparently different versions of F-15 on the^.arket. If the- 
modifications given last month don t work fo y 

1. Load in "TITLE.BA" with H1H0N. Line 301 contains a ’iMi. 

which roust be disabled by changing the %9 [ [ S Agve, but yours may be 

■ i: cr:or:urs t n^iTu:BA".08.?80,.0FFB 

2. Load in "F15.YID" Change bytes W^B-RD from *FF OF ^V’oHferent 
1 ocat 1 on*!n^your^version,^so J^rfo^^em/save the file hack out with 
S "£0:F15.V1D",08,5100,7E00. 


3. That’s it. 













.-; >e program I s MOVIE BAK ER, Copy--- 

me. ■- > 

■R TO ® ■■Or^use / 

this program and place the errors for you- 

HOW TO HAKE A WORKING COPY WITHOUT ERRORS ON THE DISK: 

Make a copy of the original disk without errors (3 minute or file copy). . 

2 Load and execute LOHON with SYS 32768. Clean up the work spac 

F CCOO CFFF 99. ^ ,, ; 

. Hick with L "WHO", OB. Hake the. following 

3 - change^u sing°the°H r commandV These “values are inserted by the program if 

it passes the protection scheme. ... . : 

• • 


CCD4 90 

CEF8-F9 FF FF 
CF50-52 54 48 45 

CF56 • 0.1 , 

CFDB-DE -01 OT 01 D1 


r E 


,i 1'C ' ’ -i^ 

J L 


'j ; o 


;1 ^ ' 


\ ^ - : *W>^KO"vTO%CEDO % lHlDD«* • 

Save this file to yes r xxrpf disk cith 5 -» . 

_ . — # ■ dJ 11 


' v. * 

• -. 7 


4. You can now load and run the P r °9 ra ® “appears^the first^time, you 
for the following. After the eain ^enu »PP' Ba djBd ^ifs short-), you 

should select the FLAY JPjJ°g* d °"hoose any other option as osual. if you 
can return to the WAIN KEN ^ with LOAD -MHO-.8,1 and then 

want to skip the opening credits .start wl t t - me inl0 the r.ain 

SYS 52224. You should still choose fla 
menu. 


5. YOU’RE. DONE ! 


method 



After starting the program 
eemory. The 
:omparing 
given 
disk. 


In SteD o aoove . nicci »«*»••■» - 

we began examining the program more closely 

We found that each option module has Us own protection check 


separately. P Sometimes"a f little "pelting can save a lot 


code, which 
modulo 
s that 
heck the 
modified 

Not only that, but it 
. As long, as we always 
o unprotect each option 
of work. 










nc. 



1983 by Audio Lignt, -•■ 

- L OF PROTECTION: This program will check TRACK 33 for an IRROR * ^ ; 

HOW TO COPY: Use any copy program capable of plactng an e 

HOW TO MAKE A WORKING COPY WITHOUT ERRORS OK THE DISK: - — ~ > , VC/ 

drive out of line. . thi 

,f you examine the code from *»« thr...h J3M5 yoo «11 ,$C7D7 

Once the program passes this cn f CK » 
s?ore those Values In the same location. 

we will bypass the protection In the following manner: .. ; - 

1. Hake a copy of the program without errors on the disk. ; . 

2 Load ani ran the program from the original dlsk. ince the . trPS, 

. - running. RESET your computer. v.te-.-,-... • tn 

„ inBB . save out the code from JC000 through SCBOO 

3 ‘ your ro d p, , 5 m t :i l thT ; M?”F*l«Tl-. 0 ».C 0 W.ce 00 . 

4 how for the main body. Load the program from the original disk .with. L 

"KOALAPAINTER-.OB. 

5 Using the K comoand at $0A81. change the $A0 to a $60 (RTS). 

6 . S8ve out the altered code with S ■80:KOALAPA1NTER-.08,0900.<600. 

7. To utilize this program follow the procedure below. 

LOAD "KPAIKT1 0 ,8,1 
LOAD "KOALAPAINTER .8.1 
SYS2304 

Your swap screen will come up bl.ack h’th this 5 y m iish US to write a 

X boo? L ?rog?U°?h“ SJll’loid'tSrUS programs and SYS to the location 
given. 





The program 


Is VIP TERMINAL (TH), Copyright 1983 by SoftlawC ojjk 


.&nd an 
"02 t>as 
'for £ 


TYPE OF PROTECTION: The disk contains en ERROR 2|xn TRACK j And 2. 

ERROR 23 on TRACK 18,6. The foroet code A on^ Uee ’pp/ voII 

forcset’codeK TheVogr- rill check for the presence of, 
all of these errors. 

HOW TO COPY: Use *ny copy program capable of placing tthe3€ errors. 

HOW TO COPY WITHOUT ERRORS ON THE DISK: 

This program is stored on the disk in user files* ^tl- 6 on^TRACK^ 1 9 ! 
machine language loader. The loader is ocated on e d " TRAU 

SECTORS 0-6. We will make our modifications directly o 

1. Make a copy of the disk without errors. Next*^Sisk^You need to change 
18/0 must be corrected so *° u Ue °n the d si ^ e the disk cannot be 

BYTE 02 from an $01 to a $41 (DECIMAL 65, A ). UN-WRITE PROTECTOR 

written to by ordinary means yet, you must use the un wkiil 

• program given below to make this change. 


2. With the format code changed, we 
necessary for the proper execution 


will now make 
of this program. 


the other changes 


3. 


Using a track and sector -editor, «ke the fdicing changes 


TRK/SEC 

19/0 

19/1 

19/1 


BYTE LOC. 
7 ft 19 
123-125 
196 a 208 


ORIGINAL 
32 (both) 
20 27 1A 
32 33 


MODIFIED 
30 (both) 
4C EC 18 
30 (both) 


NOTE: Byte locations 
from 0, not 1. 


are given in decimal; bytes - ere* counted starting 


4. The loader Is designed to Ves^ ieturn f when°thr-DESKTOP" 

screen S is°displayed! n The program will load in about 2 minutes. 


5. YOU'RE DONE! 


UN-WRITE PROTECTOR 


10 

20 

30 

40 

50 

60 

70 

80 

90 


OPEN 15,8,15, MO- 
OPEN 2,8,2,°#- 
PR 1 NT#15 , "Ul:2 0 18 0" 
PRINT#15, "B-P:2 2" 

PR I NT# 2 , 0 A*; 

PRI NT# 1 5 , *K-W CHRS (1 ) 
PR 1 NT#15, °U2:2 P 18 0" 
CLOSE 2 
CLOSE 15 


CHRS(1 ) CHRS(1) “A* 










rhe program is MnwTF7imA'S REVENGE i»l- Ccovri.ht 1984, P.rb.r Broth ers. • 

HOB TO COPT: Copy with *»y good nibble copy program that will piece ^h* . 
errors for you. • . . 

HOV TO MAKE A WORKING COPY WITHOUT ERRORS: 

1. An expander board is required for ^rlT^Power °off the computer,- 

Backer or CSM Single Slot board will that grounds the EXROM 

i-rNMs ^s^Uh^n the IVlnT and l! the upper-right 
hand* switch on the CARDCO/5. Power on the computer. 

2. Load and execute HIMON with SYS 49152. p ™vi*e a a Cl R ft£ T *wi th G^FCE2 .*The 
F 8000 BFFF 99. WiththTS accomplished perform 

screen will now display 30719 BYTES FREE. 

3. Load the program from the original disk n s° A executi^g, perform a 

program has finished loading and the game Unitor with SYS 49152. With 
RESET With your reset switch Re-ente the mon o ’t t the 

the H command, change the $37 at $uuui x.o a : — 

. SASIC ROM. / . - • VM. - 

4. tjsing the H command t -change ioratton V80DD ^^VoutTri 

' • -« complete explanation of 

RESETS. 

5 . Save out the code from $8000 to . SBFCC to ** formatted .disk with 
^ “PBGAME" ,08,8000,BFCD. 

6 . To use this program L ® A J ’ P hEX K $86o9 1 '»hUh , is C th 1 e t warI S st”t 7 iect 1 or for 
the decimal equivalent for HEX $80uy, wnicn 

this program. 


7. YOU'RE DONE! 








f _. 


: v 


The nrnnra. is OXFORD PASCAL, Copyri ght 1984 O.C.S.S t D. 6ooi)« »«. 

ssrc W^-:- • 

HOW TO COPY: Use any copy program which can xppy error 23 »• ...•.. / .. 

HOW TO HAKE A WORKING COPY WITHOUT. ERRORS ON THE BISK: ..' ' 

:.. TV Copy the disk wVth any xopy program which dorsn t create arm 

2) load a track/sector editor and run It. 

3, Read in 18/1. B,t.j 6 J -.5 ($«0-5F) |h..ld be .11 JOB’S now. 

Change SUI^Si to ^(shifted spaces,. 

Change byte 94 ($5£) to $0E. 

■ ZIX & ^^Ih^ect^ Sobered starting at 0. not 1. , .. 

4) Read in sector 1 3/5. ~ ~ 

Change byte 4 ($04) from *°J *°. t*n * . 

Change byte 131 ($83) from $32 to $30. 

Change bjte 138 ($8A) from $33 to $30. <- 

Write the filtered sector back to disk. ... . ... . 

■ 61 S t C h r e at D0S rocmrn’d'-VOV^Ist^the^rsr thouid^^^SA^hlocitSre’e" 9 

. 7) You're done! . 

The first program on the oo^routine t us ing C the° stack) which Ibads at 

in the file ID. LD is an a^oboot routine (u ^ loads u blocks from 

$01 0 0 - $ 1 8FF and starts exe J u ^ n ^ ^ co 1 / This 14 -block program starts at 
disk into the BASIC area at e requ lar program file. In step 3 

sector 13/5 and is linked together like a^regu.ar £^ (in fi conveniently 

above we created a <3 } r ®J t pJ^ T Refer to PPH Vol I for details on 
empty slot) and named it BOOT. neTer ty 

directory entries are set up. 

let’s take a Took at how ID «n 1c- In t^BOO^ ^9-^^ \ 

directory entry. Remember, each sector of normal LOAD process gets 

two-byte link to the next sector of the t 11 e #nd s1 ly follows the 

• -the first link from the program s directo yector (RESTORE key)} 

links from there. LD starts by Jisa 9 ndoB acce ss channel (#)• 
initializing the disk (10) and OP®!? 1 9 . , the address to begin loading 

Initializes soce key ' 0 cations: t45- 6 holds the .dd ess t s ? hoi(js e 

et ($0801), $47-48 holds the first link u> the link bytes 

number of bytes to read 1 rom : e *^, S S ® C ^“broutlne at $182E-64. That routine 

($FE). Next, the ■»» i . n ( rou i! r 'fll«-8A which converts a hex byte "b° 
calls on another Routine at $1865 SAwhlc u2 -63. In this case. 

two-bvte A5C11 equivalent and puts tne ^® su ' . . t , SCI j since e U1 

the routine Is called twice to convert t ^ h( . 1/ . S , c l’ I nV T/ t s 0 1 „fo is then written 
command requires its ^/S i nfo 1 n JSC 11 . The *SC 11 T/S to the drlv e, 

into a 'blank' U1 command at $ 1 /AB-Bb. me ui 










which sets the specified block. After en>Ul cor. e, end. ^the^d lck^sends ^^ 

wessage°w 1 thout e do 1 ng'anything'llth It (Just.to 'shut ^ •*? 

SSri-xViEW^^^ ,158? 

the file into memory based on its own Point® th€ ji8ED routine 

earlier) so the load address bytes are simply y x kwtpc read 

end ignored! Location $0000 will he used to count the 
from the sector so far (not including link bytes), s 
to $02 to account for the load address bytes. 

At long last we are ready to read In the actual program code from the ffrst 

sector 9 The routine at S18ED is used to get the bytes one it a time The 

subroutine at $18E2 stores each byte in the location -pointed * *he 

pointer at $45-46, which is then incremented. B J in e be of byte s . 

byte counter in $000D is incremented too. Once the ^urnoer u 

specified by $49 has been read in> we !“ e ? d -y : t ° ' r-nn^rt-' ^be' -T/$ ‘ 

assuming there is one. The .routine at -S1B2E * s \ *rtoi 

link to ASCII, send out the.i .i-U-V - ctrsmind end skip ♦ * ■ ninkV 'are 

message. Them the first two bytes of the’ new -sector i to 

saved in $47-48 end checked to see if this is the last sec *° * y (s *§\ 
isn’t the last sector, we simply set the number of bytes rea^| 5 e*tor.* 
to $00 and jump back to the code which reads in the res 

rocess described In the last paragraph is repeated over and over until 
ast sector Is encountered. The LD pograr detects this thesame^way t^ 

1 LOAD routine does: the first byte » f tl " 1 L J l , here in this block 
ack 0). The second byte of the link then spec rout1ne at $1825 

ile ends (since the block may not be f hp rpa H) Then the 

fers this byte to location $49. (number of bytes to be ( J K) 

Ei^t^i:^;rthrh^snrr!lo^’rre^ t I00T T ^og^L o ;.s , ^ 

read in and is ready to be executed.. 


The p 
the 1 
norma 
no tr 
the f 
tr ans 
rest 
messa 
been 


The BOOT program is executed 
conveniently preceded the code 
SYS (2063), which means we can 
checks sector 13/9 for an erro 
Step'4 above changes the check 
by changing a CMP #$32 and CMP 
we change the default load add 
This Is not absolutely necessa 
accidentally load BOOT using 
BOOT into the directory, we no 
scratch them and then validate 
0 blocks free originally). The 
programs added to it. ,To start 


with JKP $080F (=2063). The author has 
at S080F with a BASIC program consisting ot 
Start the program »«h RUN. The program 

r 23 in a completely straightforward ‘ manner, 
for error 23 into a check for no error (00) 
#$33 to CMP #30's as usual. Also in step 4, 
ress of the BOOT program from $0401 to >08U. 
ry, but it avoids problems if you should 

,8,1“ rather than just "»®"« 0nc ® P ke 

longer need the PASCAL and LD t d 

the disk to correct the BAM (which indica 
disk can now be file copied or have othe 
PASCAL, simply load BOOT and RUK. 









CUSTOMIZING T'HE KERNAL 


Everybody .has their’own list of changes -they'd like to ^ake to their ;• 

Commodore 64. Keybe you don't like the screen colort.^or {1°. s*r«T^to say 
typing *,8" every time you load a program, or you d like • , • 

•KELCOKE TO BOB'S COMPUTER' when you turn the computer on. !• 5j 6S 

changes can be accomplished easily. You'll need an ! PR 0 K .?I“ 9 I“?^- ; '/Jhe 
FPPO? and a 24/26-pin adapter. A reference book such as The Anatomy of the 
Commodore tV is also Immensely helpful, especially If you want to go . • 

beyond the snodifications we present here. 


To start off, you should get a copy of revision 3 of the KERNAL If you 
don't already have it (SX-64 owners can use their present K ^" AL > ; o ;,n-5FFF 

could proceed by copying the KERNAL down to J betted way is 

but then you'll have to translate addresses back and f or . th * . A £ e ;,.? r t 
to copy the KERNAL ROM down to the RAM underneath it and switch out 

ROM. You can run your system from the RAM C0 Py 1 °? 9 ® s t £° u 5rreen editor 
modify a system routine as it Is being executed (such as the screen ed 

and IRQ routines). This way you’ll be able to test jour c ^ n9 tin?p RAS1C* 
them. You'll have to copy the BASIC ROM down to RAM as cartridge 

gets switched off with the KERNAL. You won t be able'to use a Sf -course 

based monitor either, since cartridges are also switched ou. 

you should save your custom KERNAL to disk from time to time as a 

precaution, but this method works well for us 


Start by copying BASIC and the XERNAL down to RAM with T fFFF- AgOO 

(BASlc/an/l EOOO FFFF E000 (XERNAL-)./Slow switch off the ROKs^by c^ngi 9. . 
location $0001 to a $35. YOu shouldn*^t notice any cfianje*-t>ut you 
oper ating out of RAM. Now Change location. $FOD£ to.US- (be sure dnd^binge 
it back to $E7 before burning an EPROM copy!)> This cha ^e P^vents the 
RESET routine from switching the ROMs back in when you do a f . 1 

(SYS 64738 or 6 FCE2). Since many modifications will J cha ? 9 p *5^ 
defaults vou'll need a soft RESET to test them. A '.hard RESET ^ith.a 
RESET button will still switch the ROMs back in, but it won t wipe ou y 
RAM copy. Try a soft RESET now with G FCE2. After an extra-long pause / ou . . 
will oet the feciliar startup screen, only with 51216 bytes free. Relax, 
this just means*the RAM testroutine got all the way to the VIC control 
register at SD011 before finding any 'non-RAM . 


The table on the next page lists some short PJ^hiiS you can make, for 

ct artpre Ipfs take a brief look at each of them, starting witn everyone » 

K.VJ 

'SSI K the^ V1 c'chlp'l nit ^routine )*? Thl'Ih.JlJtl? color Is .Iso specified . 
using color RAM codes. 


Npjtt on our list is a patch to automatically enable repeating for all 
To do this we'll have to Insert a JSR In the screen Inlt rout ne and put a 
short piece of code In the unused area at JE4B7-D2. This sirnply s or 
80 U?o the he, repeat flag and returns. While ,o»'r. at 1't. you m g 
want to adjust the delay before a key repeats and the speed at 
repeats (note too different locations to change speed). The new values 
giver, are just suggestions, so experiment. 


f 


- r* r r 









Row we come to e real handy pair of. changes.- First, ." e Ine 

a:n ‘MSS * ? 

KolTnU-TJ] up I *? " f «» o - u *'•«;*in e ZWV S?; W 

suk: t ,?v.s s::J e : iScSss^rsSdris.’i.n^ i?«««. u»■•»«: ■«*; 


Our ne 
so tha 
you mu 
combin 
jumpin 
10 cha 
LOAD B 
shortc 
this 1 
have 1 


xt modification is to c 
t it loads the first pr 
st first change the def 
ation works by putting 
g to the keyboard inter 
racters long, this limi 
(return) RUN (retur 
uts, e.g. R shift-U for 
imitation -is to patch 1 
t perform your custom c 


hange the SHIFT-RUN/STOP (Sh-R/Sj combination 
ogram off the disk and runs it. To do this, 
ault LOAD device as given above. The Sh 
its command into the keyboard buffer ® nd then 
pret loop. Since the keyboard buf f ?T. 1 f °" ly 
ts our possible modifications. To fit in a 
n) command, we have to use the shifted 
RUN, shown as rU. The only way to get around 
nto the keyboard interpret loop at $E5EE, and 
ommand directly. 


0-ur final modific 
three separate pa 
'64K RAH SYSTEM 
The number of byt 
•BASIC BYTES FREE 
can be altered by 
and reuse Its ces 
thee continue you 


■AB. 


ation involves the startup screen, which is^pnnted . 
rts by a routine at SE422-46. The first, part, up to ■ 
is stored as a table of ASCII characters at SE473 
es free is-calculated and printed nest, and then the 
• message at 1E45F-72 is. printed. The first part 

just changing the ASCII codes. 7 o disable.^e*yt«5 tree 

sage arda, eiake -the last two-.edifications shown, fvu can 
r screen eres£ag£ In ifce 'BASIC BYTES T.REX 


—* T . 


If you want to go ouch beyond the codifications here, you 11Probably need 
extra spacl to put code in. The only unused area left is « U4B7 02, 

but you could free-up some space (nearly 2K1) if J n * 77 fi£ ^EFRDH 

once vou*ve made your changes, burn the code intD a +T 6 ': Y 
a“d Instill it in the "o.puter using 9 the AD adapter. Powerup and take your 

new computer for a test drive! 


LOCATION 

t me 

LlUy-UT 

E 53 S 


TTTFT" 

E4B7-BF 


ORIGINAL 
HOF 

"cr 

A A ... 


MOD IFIED 
see tex 
You r cnoice 
Tour choice 
TTTET 


$0286 

#$80 

$028A 


DESCRIPTION OF ^^^^TI? , 1 ^ 

Default border, background colors] 
hpfanli cha racter color ~ 

Patch to key repeat routine 
Save character color 
Load value - repeat all keys 
Save in key repeat flag 
•Return to screen init routine 



E5F4-F5 

E4C0-C9 


AA 



3A 


T473-AF 

E45F-72 

E430-32 


COM ." 7 *“ 

-BYTES FREE- 
LDA $37; SEC 


Location of 
kev version 

10*:*“ (return) 

rU (return) _ _ t-t 

thange startup message(see text; 


Your choice 

Your choice Reuse bytes free space 
JKP SE43D Disable no. bytes free calc/prinx 



























EXECUTING 1541 ROUTINES 


As program protection evolves, schemes invo 9 newer scteemes often use. 
ill command ere becoming less common d ^ V€ *s c-eeory. There ere 

custom DOS routines executed Inside the dU di ' . «ekoRT*£XICUTE <K-E), 
several «ays to accomplish this. Including JUKP - 

nnc-EXECUTI (B-E), ampersand files ano me ju s *vnn f t 

($D0) and EXECUTE tSEO)" Ampersand files 

consider them at this time, ye'll.start our discussion «ritn. M i - . 

H-E is used to execute a routine ^ h ^ ch .^o^ 1 o^rap. 1 or ir^ns^H^ of^ROM* 

?ss :;?r;:,s?r^: r - & K‘t „Wiixf 

ss?vrsi3 n f«s;2E w ^!iHSSoK s 6orsn“i h., P ,.. *.«»* - 5 .f.i e - r « # «?n 

In memory S yourself "before'you're an^execute"'!^ There ere a couple of 

different ways you might do this. 


can be 
command 
through 


The first way is to use a MEMORY-WRITE (M-W) tomirand Th1s co« l .nd 

-"Jm a r^fsen th U V P c r ana 
this channel. The general form of the M-W command in BASIC 

PRlNTifl5,*M-W;CHRS(lo);CHRS(hi);CHRS(n);CHR$(dl);CHR$U2>; • j. 

-Co- and -hi- specify the Vow and high bytes . 

memory to start putting the data in, h • . . . •ai‘ *d2- e’t’cV are 
-send in this M-H command (up to a maximum of 30and dl . 02 x the 

the data bytes themselves. You must send all this Information le P ser)d 

-M-W" Itself) in CHRSO form, mot which is the sime as 

5 bytes, you must specify this with CHRS(5)» *0 „nrtuation in BASK, not 
CHR$(53)). Also, you should use ””’ c0 ’S n %!;i’ r *^ 0 „ t t o be In' a fixed 
commas. The drive expects each^ byte bfinformatio C0BB , will throw 

being^used This has heen 

corrected in the newest Commodore manuals. 

Another way to get a r °^ i blOCK-READ^ (B-RT or USERl^Ul) commands. The U1 
diskette using either the BLOCK kim) \b *t several bugs in it. 

command is by far the most common way, since B ^ h s a u s re se ^ at the y block is 

When using Ul, special care rius 1 t i You must first open the command 
loaded into the correct memory location You must tirs P exampU of 

channel to the disk end then open op a i channel too. 8 up 
opening a # channel is : 

OPEN 1 ,8,2,"#" 

This form lets the disk drive select which of Us buffersblock 

into. The drive has five 26 J"^ t | 07 np! 0 7 fp sin ce CS ny ML routines must 
S0300-03FF on up to buffer 4 at $0700 07FF. Since y where a 

reside in a particular place tn mtm.ry. and stnce you h.v ct # specif1c 

routine Is to execute it with M-E, , his b sicply specifyiu9 

buffer to be used. Fortunately, ^ U 0 C *" ^Te 2 H.vJng opened the t 

the buffer number after the If , e.g. OPEN , » » . f or Ul is *• 

channel, you are ready to send the Ul command. The syntax for 





5351 3unr 


21 39*4 


<J J L L J I JiU'» 


.... -4510 3 ui 6 uuiojiuo 3 oq s*a^ uno* aaa spusmiaoo 31(133X3 P u ® dWnP 

? 0 d« ”l op no* -.ComiCuo -o;o ‘*o»J»-il«M » °» 

3-9 3->< J c py3 01 II no/C saiaj.1 vCusa ‘asando }0 •Jl3Sjno/C s i^ 

‘yC'jj.suap 4 in i ui a«ln no/C it # 6u mo}sno }0 ad/C} auios 
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°^ U i ii i nd^ ioi3a^/^oeai P pu9 uaiinq 6u ipuodsa jjoo b scq ananb aqq u j. qoC qoB3 
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'** «PW‘;?««(r».O r 8!-2it»32X3-«aTa 3 MVoq sn. s6a V aq 

: h " i ; ' „ . ou J^y H 3 H asfl 3 *M-w a sB°saiLni n ?Btu?s <I 3aBS aq; SMOtJoi 

V ”” r v »uu5 ? »j.;. 5 »"»»^pp. ^-ds.«.»«.«i. 


(iq)$HH3i(0l)SaH3^.3-H»‘9l#iMiyd 


:si xb^UiCs am -ssaoojd aqq 10 iasd *saidais 
„ • ..... .'rtupaaoD 1-M UB uii» a^naaxa Kpaa-i aia noA 

‘WOd ^[“pilMOl'ao N-i «IA quas • m W* ^ paaa uaaq s«q au^noa aqq aou 0 

*o i o z' in-'suiMiad 

oU ! o^ ! - : i n -‘ sl#iNiyd 

: spuBimuoo in PIl 8A 3J9 6uiMO[[oq 
..c inns UIU 11 M aiqeqdaooB aua saoads qSnoqqia • ‘suo loo luias asn 

ptnoHS “® li "Jj“"V°oso ,J ^u nX^/pSSfnboj^lHS!'; “"i iSw""*’ 

^ r/giiisf.;; 8 ; 

: .}mo ; -'» 5V‘ ;i ' s»lpp» "j«PdOdos o„; UV po;;;oods l ouu, q o o M1 s; .to U u»«. 

joiias!^39Ji! 3A i Jp? I auuBqa? a 11(1 b 4 31#1MI d<i 







MAYBE IT WILL WORK DEPARTMENT (MAYBE' HOT) 


HOW DO YOU WRITE A TRACK ADJACENT TO A HALF/TRACK? 


On the 1541 It Is very diffilcuH tlf not impossible). This Is 
write with erase feature of the drive that erases a guard 
tracks. When you write a track, the adjacent halftrack will be 

Unless.... you want to try modifying your drive. This is .a 


-!due ;tD‘ tfee‘ 
band .between, 
erased* by the . 


guard band 


procedure that sometimes works (sometines.lt 
half-track contain Identical information (as 
method may help. NOTICE: ANY MODIFICATION TO 
DAMAGE AND/OR INJURY. CSM SOFTWARE INC. WILL 
FOR DAMAGE AND/OR INJURY AS A RESULT OF 
PROCEDURE! 


don't)'. If the track and the 
does most of ARTs disks) ^his 
THE DISK DRIYI MAY RESULT IN 
NOT ACCEPT ANY- RESPONIBILITY 
THIS PROCEDURE OR ANY OTHER 


1. Locate the connector to the read write head on your disk drive. This is a 
black plastic connector that uses wires 1, 2, 3, and 5 (4 is not used). 

2. Remove the #3-wire (normally the yellow wire) from the connector. This 
wire supplies the current to the ERASE portion of the R/W head, thereby 
preventing the guard band from being erased. 

If your R/W head produces a wide enough track it just may be••ItrtVrperted by 
the drive as having the same data on the track and the half-track. 

Originally these disks that contain data on the track and 'the_ „• a.d j acent 
half-tracks may have been -created oa.drive trith £ £f> trick per ttpi J . 

R/W head assembly. The 154) uses a 40 tpi R/W * head - *ssembTy. As• • you •. can 
imagine, the drive that uses the 96 tpi * 'R/W * head will produce^. a. .much 
■narrower track than one produced with-a 40 tpi head. If the actual tc-ack 
narrower the guard band will be narrower. With this information in mind you 
can see how it is possible to write adjacent tracks and half-tracks, kit 
our little hardware modification it is possible to force the disk drive Into 
writing a little track wider than normal. This extra wide track may t>e 
interpreted by the drive as data on the track -and on the half-track. Just 
keep in mind that this procedure does not always work as outlined. This is 
undoubtly due to variations of the drive and of the disk media. 

3. Be sure to reinstall the wire 8fter testing the procedure. AS WITH ALL 
HARDWARE MODIFICATIONS... USE CAUTION!! 


EEK FROM CSM 

f • - - m 

CSM now offers a NUMERIC KEYPAD for the C-64 and VIC-20. Our keypad has sore 
features than any other on the Earket. It plugs into the keyboard connect 
Inside your computer rather than the joystick port, so it is 100% compatib e 
with all software. In addition to the nuBeric keys and decimal point, it 
features SHIFT, RETURN, INST/DEL and cursor keys. It also has keys for all 
the arithmetic operations Including + - * / andt • 

P.S. If you remember. Bear Technology's keypad, this is the same fine product. 















JUKE 1S85 


ALL ITEMS IN STOCK FOR IMMEDIATE SHIPMENT 


^CO^s:^V^aD T ^T^DGE D pROTln^N T srHE.fs:.U MUCH SORE, ^ • 


1541 DISK DRIVE ALI6KKEKT PROGRAM - KEfeM ! VERSIOC 2-V 
See Oct. 84 Compute! Gazette for review 

PROGRAM PROTECTION MANUAL FOR THE C-64 (VOLUME I) 

r£E>nn 5 SLOT EXPANSION BOARD FOR THE C-64 
^INCLUDES A RESET BUTTON AND FULL CARTRIDGE SWITCHES 

ADVANCED ML BOOK FOR THE C-64 
ANATOMY OF THE 64 
ANATOMY OF THE 1541 
MACHINE LANGUAGE BOOK OF THE 64 
TRICKS AND TIPS FOR THE 64 
T541 MAINTENANCE MANUAL • 

INSIDE COMMODORE DOS 


(ABACUS) 


(60SUB) 

(DATAKOST) 


44-55 

. 29.95 
65.00 


19.95 

19.95 

19.95 

14.95 

19.95 

29.95 

19.95 


PROREKADE PROGRAMMER THATSrfE USE * £RE! ;_“£f 

' vSil OUR OPERATING SYSTEM CHIPS. CARTR1MEPROGRAMS OR ,»KU fBS 
r FOR TttE DISK DR I V£ 7 SOFTWARE 1NC1UDED Ok .DISKETTE 


.99-50 




\ *• - *9 V 


DATARASE 


B6ARDS 

PCC2 

PCC4 

PCVH2 

LP28 

21F28 

2732 

2764 

27128 

27256 

AD 


t* 


This will erase all U.V. erasable EPROKS 
(2732, 2764, 27128, 27256, etc.) 

SOCKETS &KD EPROKS: fA . rrTt 

2 CHIP CARTRIDGE BOARD t?ITH 2 S S^KETS 
4 CHIP BANK SWITCHED CARTRIDGE BOARD W/SOCKETS 
PLASTIC HOUSING FOR ABOVE BOARDS 
28 PIN SOCKET FOR EPROM 
ZERO INSERTION FORCE 28 PIN SOCKET 
EPROM (USE IN CARTRIDGE 4K) OBT „ r n/fcM 

EPROM (USE IK CARTRIDGE 8K OR IK DISK DRIVE E/AD) 

EPROM (16 E OK ORE CHIP - USE IK PCC4) 

US^THIS^ADAPTER^WITH 1 THE 'SWlflWl* THE DISK DRIVE 
OR IN THE COMPUTER. 


34.55 


EEK LOW 


■ ** 


PfclCE! 
5.95 
19.95 
** 2.50 
.59 
4.75 
5.00 
6.00 
14.00 
18.00 
** 6.95 


** 


*■* 


C "I?l!1msT5 C m"“cHIF BOARD KITH 2 SOCKETS INSTALLED, TKO 2764 

EPROKS AND A PCVH2 PLASTIC CASE. 

“ “^St^DGE .no PROMOS (PROMEHADE) 

software on the cartridge. 

SIRGLE SLOT EXPARSLOK BOARD _ , r .putt Tf 

KITH RESET DUTTOK AED GAME, EXROK, ERABLE fc PObER SbiTCt.ES. 

i 

XETEC SPI PRINTER INTERFACE 
DISK DRIVE BELT 


** 17.50 


25.00 

24.50 

54.95 

10.00 
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1541 DISK DRIVE ALIGNMENT PROGRAM - VERSION 2.0 44.§5 

4 

$0 SPECIAL TOOLS OR KNOWLEDGE REQUIRED, JUST AVERAGE MECHANICAL'ABILITY. 

VERSION 2.0 IS NOW AVAILABLE. THE BEST JUST GOT BETTER!- VERSION 2.0 
FEATURES AN EVEN MORE ACCURATE CALIBRATION DISK, PREPARED ON SPECIAL 
EQUIPMENT JUST FOR CSM. 

A NEWLY REVISED MANUAL WITH TROUBLESHOOTING TIPS 15 INCLUDED. 

UPDATES ARE AVAILABLE FOR REGISTERED PRIOR PURCHASERS - 20.00 




CARTRIDGE BACKER 54.95 

THIS WILL 'BACK UP' 99% OF ALL CARTRIDGES ON THE MARKET TODAY! IT WILL 
DOWN LOAD THE NEW VERSION OF THE PROGRAM TO DISK AND WRITE AN AUTO BOOT 
LOADER FOR IT. AS MANY AS TEN CARTRIDGES MAY BE STORED ON A DISK. IT WILL 
ALSO TELL YOU WHAT CODE IT CHANGED IN ORDER TO 'BACK THEM UP'. THE UNIT 
CONTAINS IMPROVED SOFTWARE THAT WILL ALLOW YOU BACK UP ALMOST EVERY 
CARTRIDGE AVAILABLE. IT WILL ALSO BACK UP MANY DISK PROGRAMS (ARTS, 
ACTIVE, PARKERS AND MORE). THE PROGRAM ALSO CONTAINS SUPER 5AVER--DISK TO 
DISK AND DISK TO TAPE FILE COPYING. 

CARTRIDGE BACKER does oet require tte*rF.*e 'IXTOCHAL- • ; *OARD i ; In 
order to run the disk version of the prograe, ^as 'do sose of the mother 
cartridge backup utilities on the market. 


o--e- * * * * * * -*• -» * -* •* * *-**•-** ♦ * ■* ♦ -* -* *-* -*•-* •*^*-*'*-« -* 


PROGRAM PROTECTION KAKUAL - VOLUME II 34.S5 

THIS MANUAL STARTS WHERE THE FIRST LEFT OFF... A FULL INTRODUCTION TO 
MACHINE LANGUAGE, RESETS, INTERRUPTS ANf) AUTO BOOTS. IT ALSO COVERS THE 
MOST RECENT ADVANCES IN PROGRAM PROTECTION. HALF-TRACKS, EXTRA TRACKS AND 
SECTORS, NON-STANDARD FORMATS, NIBBLE COUNTING, TRACK ARCING, 
UNIMPLEMENTED OPCODES, ENCRYPTION TECHNIQUES AND MUCH, MUCH MORE!!! 
EXPERTS HAVE AGREED TO CONTRIBUTE SELECTED CHAPTERS IN THEIR OWN FIELD OF 
EXPERTISE. THE INFORMATION IS PRESENTED IN AN EASY-TO-UNDERSTAND FASHION 
FOR THE BEGINNERS AND EXPERTS ALIKE. SAMPLE PROGRAMS ARE INCLUDED TO HELP 
YOU UNDERSTAND ALL THE PRINCIPLES. ' 
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CSM SOFTWARE INC. 

P. 0. BOX 563 
CROWN POINT, IN 46307 
(219) 663-4335 


all Item;'plus shipping - $3.50 for most items 







